IoT Security Measures ISE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which security measure protects the confidentiality of data transmitted between an IoT device and a backend server?

   • AAccess control
   • BAuthentication
   • CEncryption
   • DAuditing
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A retail store has IoT cameras and a separate network for point-of-sale (POS) systems. The store wants to prevent a compromised camera from accessing the POS network. Which control should be implemented?

   • APlace all devices on the same network for easier management
   • BUse a firewall to block traffic between the camera network and the POS network
   • CDisable the firewall on the router
   • DUse the same SSID for both networks
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A fitness tracker company collects user health data. To comply with privacy regulations, they want to collect only the data necessary for the service and store it securely. Which two practices should they adopt?

   • AAnonymize data but store it without encryption
   • BCollect as much data as possible for future analysis and store it in plaintext
   • CData minimization and encryption at rest
   • DUse strong authentication for users but ignore data storage security
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A company deploys IoT devices that are physically accessible to the public. The devices have a USB port for diagnostics. The security team wants to prevent unauthorized physical access to the device's configuration. Which measure is most effective?

   • ALeave the USB port enabled for easy maintenance
   • BDisable the USB port and require authentication for any local access
   • CUse a simple password for the device
   • DEncrypt the device's configuration file
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company has a fleet of IoT devices that are managed remotely. The devices have a default password that is the same for all devices. The company wants to change the password to unique ones but is concerned about the effort and potential for lockouts. Which approach is most secure and practical?

   • ALeave the default password and rely on network security controls to protect the devices.
   • BChange the default password to a single strong password for all devices to save time.
   • CManually change the password on each device over time, starting with the most critical ones.
   • DUse a centralized management system to push unique credentials to each device and enforce a password policy.
   Reveal Solution Discussion Select an answer first